Safenet_SNC

7/30/2019 Safenet_SNC

1/26

PT. Sentra Netcomindo


2/26

SafeNet Confidential and Proprietary

2

SafeNet Fact SheetThe largest company exclusively focused on the protection

of high-value information assets.

Founded: 1983

Ownership: Private

Global Footprint with more than 25,000 customers in 100 countries

Employees: Over 1,500 in 25 countries

Recognized Security technology leadership, over 550 security

engineers strong

Accredited with products certified to the highest security standards


3/26


3

A Global Organization


4/26


4

SafeNet History


5/26


55

Thousands of Customer Trust SafeNet

5

Financial

Healthcare

Retail

Technology

REV 0.1
http://en.wikipedia.org/wiki/Image:Apple-logo.pnghttp://www.ameriquestmortgage.com/index.html?sectionType=home&ad=AMERIQUESTMORTGAGE.COMhttp://www.cybersource.com/http://www.tjx.com/index.htmlhttp://images.google.com/imgres?imgurl=http://upload.wikimedia.org/wikipedia/en/thumb/3/3c/TheGapLogo.png/150px-TheGapLogo.png&imgrefurl=http://en.wikipedia.org/wiki/Gap_(The)&h=150&w=150&sz=5&tbnid=GPnyX4FWS2sJ:&tbnh=90&tbnw=90&hl=en&start=39&prev=/images?q=gap+logo&start=20&svnum=10&hl=en&lr=&sa=Nhttp://www.hsn.com/https://www.tivo.com/0.0.asphttp://www.wholefoodsmarket.com/http://images.google.com/imgres?imgurl=http://www.grizzmornings.com/starbucks.jpg&imgrefurl=http://www.grizzmornings.com/lastweek.htm&h=462&w=462&sz=72&tbnid=7B3zxB1lpngJ:&tbnh=125&tbnw=125&hl=en&prev=/images?q=starbucks+logo&hl=en&lr=&oi=imagesr&start=1http://images.google.com/imgres?imgurl=http://www.egypt.superbrandsmena.com/images/Western-Union_logo.jpg&imgrefurl=http://www.egypt.superbrandsmena.com/Brand%20Studies.html&h=191&w=283&sz=10&tbnid=7KeJWErTMk4J:&tbnh=74&tbnw=110&prev=/images?q=western+union+logo&hl=en&lr=&oi=imagesr&start=3


6/26


8

Data ProtectionIts in the Lifecycle

SafeNet persistently protects information at critical

point in its lifecycle, empowering customers toefficiently adapt to change and act on opportunity.

> Protecting the identities of users, applications, and

servers

> Securing the transactions they perform

> Enabling data ownership and control by encrypting

data when it is created, accessed, shared, stored,

and moved

> Encrypting the critical communication paths on which

data travels


7/26 SafeNet Confidential and Proprietary

9

SafeNet Data Protection Portfolio Summary

Offering the broadest

range of authenticators,

from smart cards and

tokens to mobile phone

authall managed from asingle platform

SafeNet high-speed

network encryptors

combine the highest

performance with the

easiest integration andmanagement.

The most secure, and

easiest to integrate

application & transaction

security solution for

enterprise and government

Worlds first and only

unified platform that

delivers intelligent data

protection and control for

ALL information assets

Identity Protection -

Authentication

Transaction and Identity

Protection - HSM

Data Encryption and Control

Data Secure

Communication Protection

High-Speed Network

Encryption

> The industrys only

unified authentication

platform offering

customers the freedom

to adapt to changing

environments

> The market leader incertificate-based token

authentication

> Unique technology

offerings with client-less

tokens, high-assurancesolutions, and more

> Market leader in

enterprise-grade HSMs

> Industry innovator in

payment HSMs

> Widest portfolio of

platforms and solutions

> Delivered over 75,000

HSMs the most in the

industry

> Only leading HSM with

the option of keys

ALWAYS in Hardware

> Data-centric, persistent

protection across data

centers, endpoints, and

into the cloud

> Centralized policy, key

management, logging,

and auditing

> Integrated perimeter

data leakage prevention

> Appliance-based,

proven scalability, and

high performance

> Solutions for Ethernet,

SONET up to 10Gb

> Best-in-class Security

Management Center

> Zero bandwidth loss,

low- latency encryption

> Unparalleled leverage

across classified and

COTS communication

protection (FIPS 140-2

Level 3)


8/26


10

> Secure enterprise access

> Simplify remote password

management

> Enable new online services

> Ensure Compliance

Offering the broadest range of authenticators, from

smart cards and tokens to mobile phone authall

managed from a single platform


Authentication


Protection - HSM

Data Encryption and

Control Data Secure


High-Speed Network

Encryptoion

Token Management

System

USB Authenticators

Smart Cards

Hybrid

(OTP/SC/Flash)

Authenticators

OTP Authenticators

Software / Mobile

Authenticators
http://images.google.com/imgres?imgurl=http://blogs.appliedconsultancy.com/acsl/wp-content/uploads/2009/05/300_blackberry_bold.jpg&imgrefurl=http://blogs.appliedconsultancy.com/acsl/&usg=__GuGgx053d5F9gbvDoKhIpI2tSQw=&h=446&w=300&sz=24&hl=en&start=2&sig2=WH5Ze3C-MZ4FzM9zAauL2A&um=1&tbnid=uHukQQyXBjIXnM:&tbnh=127&tbnw=85&prev=/images?q=blackberry+bold&hl=en&um=1&ei=8UxJS5afNYvj8AbwmJSKAw


9/26


11

eToken PRO Flagship USB Smart Card

Supported SolutionsRemote access (VPN)

Network access

Combined physical/logical access

Digital signing

Main Features

Highly secure smart card chip

FIPS 140-2 Level 2/3 and Common Criteria certified (smartcard chip only)

On-board RSA 1024-bit and 2048-bit key generation, authentication &

digital signingStandard Microsoft CAPI and PKCS#11 support

Secure storage and robust file system

Hardened tamper-evident and water-resistant shell

Standard USB interface


10/26


12

eToken PRO and iKey Smart Cards

Supported SolutionsRemote access (VPN)

Network access

Proximity access

Digital signing

Data security

Picture ID Badge

Certifications*

FIPS 140-2 Level 2 certifiedCommon Criteria certified

*applies to eToken PRO Smart Card


11/26


13

eTokenPROAnywhereFirst-of-its-kind innovation

The first portable, reader-less smartcard authenticator that combines the

strength of certificate-based strong authentication with the plug-and-play

simplicity of OTP

Enabling critical business applications

Securely access web-based online services and corporate networks (SSLVPN) from any computer with an Internet connection and a USB port

Digital signature/electronic document exchange applications

Delivering unmatched security, simplicity & convenience

Complete user mobility: no need to pre-install desktop client software

Simple, plug-and-play end-user experienceZero footprint after session closes ensures maximum security

No maintenance: never expires and needs no battery replacement


12/26


14

eToken NG-FLASH

Smart-card-based USB authenticator with encrypted flash memoryCommon Criteria certified (smartcard chip only)

Supported Solutions

Encrypted storage (multiple GB sizes)

Remote access (VPN)

Network access

Proximity

Digital signature

Data security

NG-FLASH Anywhere -


13/26


15

NG-FLASH Anywhere

eToken NG-FLASH Anywhere enables users to securely access onlineresources from any computer with a USB port and Internet connection,

without the need to install client software.

In addition, with up to 16GB of encrypted Flash storage, users can create a

mobile office by safely carrying protected documents and applications with

them at all times.

Combination of clientless zero footprint certificate-based authentication with

the ability to conveniently store data and applications on encrypted flash

storage creates a secure online environment


14/26


16

eToken NG-OTP

Hybrid USB Smart Card Token with Integrated One-Time Password (OTP)Technology

Common Criteria certified (smartcard chip only)

FIPS 140-2 Level 2 certified (Cardos OS version)

OATH compliant

Supported Solutions

Remote access (VPN)

Network access

Proximity

Digital signature

Data security


15/26


17

eToken PASS

FeaturesToken with OTP functionality (LCD display, battery, and OTP generation button)

Support for OATH OTP protocol

Event and Time synchronous options

Standard support for RADIUS OTP

Modular OTP algorithm support

Integrated secure logical and physical access with embedded proximity coils

*Integrates with SafeWord 2008 and eToken TMS Management systems


16/26


18

eToken Gold

Features:Pin pad interface and PIN protection option

Challenge/Response option available

Before generating an OTP, the user must enter a challenge passcode that appears on

applications login page

OTP Security algorithm:X9.9 Challenge response algorithm

Synchronous proprietary event-based algorithm

Supported in both SafeWord 2008 and eToken TMS management systems

Easy integration with Check Point Endpoint Security to enable two-factor

authentication and pre-boot authentication with a single device


17/26


19

Ranked #1 in the market worldwide, SafeNet HSMsprovide the highest-performing, most-secure, and

easiest-to-integrate application and transaction

security solution for enterprise and government

organizations. Robust FIPS and Common Criteria

validation makes SafeNet HSMs tamper-resistant.

> Securely store encryption

material

> Hardware based identity

verification

> Secure execution ofdigital transactions

> Ensure Compliance


Authentication


Protection - HSM


Data Secure


High-Speed Network

Encryptoion

Luna SA / SP

Luna EFT

Luna XML

CA4

Luna PCM

ProtectServer Gold

Luna PCI


18/26


20

Transaction and Identity Protection General

HSM

Luna SA The SafeNet Luna SA is a flexible, high assurance, and high performance

network-attached HSM, providing up to 6,000 signings per second and

hardware-protected key management, where security and performance are

a top priority. Here

Luna CA The SafeNet Luna CA offers the strictest hardware security for Certificate

Authorities (CAs) issuing digital identities in PKIs. It protects the PKI root

key and performs all key management, key storage, and key operations

(such as digital signing) exclusively within hardware. Here
http://localhost/var/www/apps/conversion/tmp/scratch_1/safenet%20Slide%20Persentasion/Luna_SA_5_PB_(EN)_web.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/Luna%20CA4_PB(EN)_web.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/Luna%20CA4_PB(EN)_web.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/safenet%20Slide%20Persentasion/Luna_SA_5_PB_(EN)_web.pdf


19/26


21

Luna EFT The Luna EFT (PH-EFT) is a network-attached hardware security module

(HSM) designed for retail payment system processing environments

for credit, debit, e-purse, and chip cards, as well as Internet payment

applications. It offers secure PIN and card processing, message

authentication, comprehensive key management, and general-purpose

cryptographic processing. Here

Protect Server External & PSI The SafeNet ProtectServer External is a highly flexible and cost-effective

network-attached HSM that performs as a central cryptographic subsyste

for delivery of comprehensive symmetric and asymmetric cryptographic Services. Here

Transaction and Identity Protection Payment

HSM
http://localhost/var/www/apps/conversion/tmp/scratch_1/safenet%20Slide%20Persentasion/Luna_EFT_PB_(EN)_web_v4.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/ProtectServer_External_PB_EN__web_v3.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/ProtectServer_External_PB_EN__web_v3.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/safenet%20Slide%20Persentasion/Luna_EFT_PB_(EN)_web_v4.pdf


20/26


22

Comparison Safenet with other vendor

Here
http://localhost/var/www/apps/conversion/tmp/scratch_1/A-Review-of-Hardware-Security-Modules-Fall-2010.pdfhttp://localhost/var/www/apps/conversion/tmp/scratch_1/A-Review-of-Hardware-Security-Modules-Fall-2010.pdf


21/26


23

> Centrally encrypt and

control access to sensitive

information

> Enable secure

collaboration and

information exchange with

persistent protection andcontrol

> Ensure compliance across

Datacenter and endpoints

and into the cloud

DataCen

terSuite

Endpoint

Suite

DataSecure is the markets only unified platform

for data encryption, key management, and

granular access controls persistently protecting

information from the data center to the broadest

array of endpoint devices and into the cloud.


Authentication


Protection - HSM


Data Secure


High-Speed Network

Encryptoion

DataSecure

EdgeSecure

ProtectDB

ProtectApp

ProtectZ

Tokenization

Manager

eSafe SmartSuite

ProtectFile

ProtectDrive


22/26


24

Data Encryption and Control Data Secure

Protect DB SafeNet ProtectDB software is integrated with a DataSecure appliance to deliver powerful

protection for the sensitive corporate and customer information stored in databases. With

ProtectDB, you have the flexibility to encrypt data at the column level within databases,

at the application layer, and during batch-driven data transformation and transaction

processes. ProtectDB helps avoid the risks ofprivileged-user access by allowing for

the separation of administrative duties. Centralized key and policy management provided

with DataSecure simplifies the enforcement of data encryption in virtually any number of

databases across heterogeneous environments.


23/26


25

Protect App To protect the data that resides within enterprise applications, select SafeNet ProtectApp

software. Whether you need to protect credit card information, e-mail addresses, health

records, or national IDs, ProtectApp offers persistent protection by combining proven

encryption algorithms with granular, policy-based security. Data is secured transparently,

without affecting application performance or the user experience. The centralized key

and policy management provided with the integrated DataSecure appliance enables

administrators to support a large number of applications.


24/26


26

Protect File SafeNet ProtectFile software enables you to secure the unstructured data residing on

data center servers. Working with a SafeNet DataSecure appliance, ProtectFile encrypts

data and controls access to sensitive folders and files kept on the hard drives of local and remote servers, network drives, and file servers. By selecting ProtectFile, you can facilitate

collaboration with the confidence that your word processing documents, spreadsheets,

designs, and images will all remain secure throughout their lifecycle.

Protect Drive SafeNet ProtectDrive is an award-winning full-disk encryption product that secures entire

hard drives in laptops, workstations, and servers, as well as removable media. By using

ProtectDrive, you can ensure that sensitive information remains secure and compliance

is maintained even if a system is lost, stolen, or disposed of improperly. Centralized

administration makes ProtectDrive easy to deploy and manage.


25/26


27

> Centrally manage, encrypt

and protect sensitive

information on high speed

communication links

> Protecting massive amountsof data with high throughput

and zero latency

SafeNet high-speed encryptors

combine the highest performance with

the easiest integration and management.


Authentication


Protection - HSM


Data Secure


High-Speed Network

Encryptoion

Ethernet

Encryptor

SONET Encryptor

Conversion

Encryptor

Security

ManagementCenter (SMC)


26/26


Thank You

Safenet_SNC

Documents

Transcript of Safenet_SNC